CVE-2015-0570 — Stack-based buffer overflow in the SET_WPS_IE IOCTL implementation in wlan_hdd_hostapd.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via a crafted application that uses a long WPS IE element

Back Back to CVE browser

HIGH

Stack-based buffer overflow in the SET_WPS_IE IOCTL implementation in wlan_hdd_hostapd.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via a crafted application that uses a long WPS IE element

Published May 9, 2016

7.8

HIGH

CVSS 3.1

EPSS 1.75%

Description

Stack-based buffer overflow in the SET_WPS_IE IOCTL implementation in wlan_hdd_hostapd.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via a crafted application that uses a long WPS IE element.

Affected products

Remediation

No remediation recorded yet.

Metrics

1.75% 0.01751

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01751

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.75% (0.01751)	77.03th	v5 (v2026.06.15)
Jun 15, 2026	1.75% (0.01751)	74.86th	v5 (v2026.06.15)
Mar 17, 2025	0.15% (0.00148)	32.66th	v4 (v2025.03.14)
Dec 12, 2024	0.15% (0.00155)	53.24th	v3 (v2023.03.01)
Jun 15, 2024	0.15% (0.00155)	52.05th	v3 (v2023.03.01)
Mar 7, 2023	0.15% (0.00155)	50.05th	v3 (v2023.03.01)
Mar 6, 2023	0.95% (0.00954)	36.37th	v2 (v2022.01.01)
Sep 2, 2022	0.95% (0.00954)	34.50th	v2 (v2022.01.01)
Apr 1, 2022	0.95% (0.00954)	32.50th	v2 (v2022.01.01)
Feb 4, 2022	0.95% (0.00954)	16.28th	v2 (v2022.01.01)

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (3)

http://source.android.com/security/bulletin/2016-05-01.html
x_refsource_CONFIRMThird Party Advisory
http://www.securityfocus.com/bid/77691
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://www.codeaurora.org/projects/security-advisories/multiple-issues-wlan-driver-allow-local-privilege-escalation-cve-2015
x_refsource_CONFIRMBroken Link

Link	Providers	Tags
http://source.android.com/security/bulletin/2016-05-01.html		x_refsource_CONFIRMThird Party Advisory
http://www.securityfocus.com/bid/77691		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://www.codeaurora.org/projects/security-advisories/multiple-issues-wlan-driver-allow-local-privilege-escalation-cve-2015		x_refsource_CONFIRMBroken Link

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 9, 2016

Updated Aug 6, 2024

Reserved Jan 7, 2015

Link CVE-2015-0570

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2015-0570

Red Hat

Severity n/a

Public date n/a

Links CVE-2015-0570